Privacy Notice

Last updated: 29th February 2024

PagoNxt Trade Services, S.L. (“PagoNxt”) is a Spanish company that provides payments processing technology services and swift bureau services to financial services companies.

The purpose of this privacy policy is to explain in a transparent, clear, and simple way how we collect, process, and protect personal information. This policy is addressed to the data subjects who are the individuals who’s the personal data belongs to.

AT A GLANCE: BASIC INFORMATION

For ease of understanding, we have included the most relevant information in the table below.

You can find more detailed information in the section below (Detailed information) and contact our Data Protection Officer (DPO) for any further clarification or query by writing to privacy.payments@pagonxt.com.

Who is responsible for the processing of your data?

PagoNxt Trade Services, S.L. N.I.F.: B87959326

Avenida de Cantabria 5 – Edificio Alhambra Pl CP 28660, Boadilla del Monte (Madrid)

DPO contact: privacy.payments@pagonxt.com

What do we use your data for?

We process your information to contact you or your company when you have requested information and to enable you to browse our website.

What legal basis do we have for processing your data?

It depends on the processing. To answer to your demand of information the processing is legally based in our legitimate interest attending your requests and develop our commercial activity.

With whom do we share your data?

We do not share your data unless we have to due to legal obligations or court requirements.

What is the origin of the data we process?

The data we process may have been collected directly from you.

What are your rights?

You can always write to us at privacy.payments@pagonxt.com or use any of our channels to exercise your rights of access, free of charge:

• Access: in other words, we tell you what information we have about you.

• Rectification: we correct the information we hold about you if it is incorrect.

• Cancellation or deletion: we delete your data when they are no longer needed or when we are processing them because you have given us your consent.

• Opposition: when the processing of your data is based on a legitimate interest.

• Limitation of processing: for example, where you have challenged the accuracy of the data themselves.

• Portability: by requesting that we communicate your data to a third party in a structured, commonly used, machine-readable format, where possible, or to you.

• The right not to be subject to automated decisions.

You can also file a complaint with the AEPD at www.aepd.es.

Additional information

More detailed information can be found below.

DETAILED INFORMATION

1. Do you have to share with us your personal data?

Yes, the data that PagoNxt requests either directly from you when you contact us for information, are necessary for the purposes for which they are requested and therefore mandatory.

2. Which categories of data do we process, what is it origing, why do we process it and what are the legal basis to do so?

3. With whom can we share your data?

4. International data transfers

International transfers outside the European Economic Area are not carried out. In the event that at any time these should be carried out they will be carried out with the appropriate guarantees (such as the Standard Contractual Clauses approved by the European Commission), which, will, after request, be available to the data subjects.

5. How long will we keep personal information?

6. What are my rights and how to exercise them?

You have the following rights:

• Access: in other words, we tell you what information we have about you.

• Rectification: we correct the information we hold about you if it is incorrect.

• Cancellation or deletion: we delete your data when they are no longer needed or when we are processing them because you have given us your consent.

• Opposition: when the processing of your data is based on a legitimate interest.

• Limitation of processing: for example, where you have challenged the accuracy of the data themselves.

• Portability: by requesting that we communicate your data to a third party in a structured, commonly used, machine-readable format, where possible, or to you.

• The right not to be subject to automated decisions: that we do not base a decision that has legal effect on you or significantly affects you on automated processing, with some exceptions.

You can also file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

If you would like more information on data protection rights, you can access the AEPD's infographic on the subject here.

To exercise your rights, please send us an email to privacy.payments@pagonxt.com. Remember you may have to provide some documentation to prove your identity.

7. What security measures do we apply?

At PagoNxt we are committed to security and apply technical and organizational measures to ensure the integrity, availability and confidentiality of your data.

For example, all persons who can access personal information are subject to a contractual obligation of confidentiality, we use Data Lost Prevention (DLP) measures, encryption of information in transit and at rest, access control, secure passwords, etc.

8. Other important information

8.1. On changes to this policy and consultations

If it becomes necessary for us to change the content of this privacy policy, we will inform you of the relevant aspects and indicate the date from which they will apply. We will also publish the changes on our website.